Help Center/ Organizations/ User Guide/ Managing SCPs/ Enabling and Disabling the SCP Type
Updated on 2024-11-15 GMT+08:00
View PDF
Share

Enabling and Disabling the SCP Type

Enabling the SCP Type

Before you create and attach an SCP to OUs and accounts, you have to enable the SCP type from the organization's management account. After the SCP type is enabled, Organizations automatically attach the FullAccess policy (allowing for all operations) to all OUs and accounts.

  1. Log in to the management console as the organization administrator or using the management account, and navigate to the Organizations console.
  2. On the Policies page, click Enable in the Operation column of the service control policies.
  3. In the displayed dialog box, select the check box and click OK.

    Figure 1 Enabling the SCP type

Disabling the SCP type

If you no longer want to use SCPs to manage permissions for your organization, you can disable the SCP type from the organization's management account.

  • After the SCP type is disabled in an organization, all SCPs are automatically detached from all OUs and accounts in the organization. However, the SCPs are not deleted.
  • If you disable the SCP type and then enable it again, the FullAccess SCP is still attached to all entities in the organization and attachments of other SCPs are lost. If you want to re-enable them, you must re-attach them to the entities.
  1. Log in to the management console as the organization administrator or using the management account, and navigate to the Organizations console.
  2. On the Policies page, click Disable in the Operation column of the service control policies.

    Figure 2 Disabling the SCP type

  3. Click OK in the displayed dialog box.
Parent topic: Managing SCPs